This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json) Hash identifier: Qf9X2sAyErAQ02XPVqcCT0ZMz7CLI7AwMpqwygs+M1U= Subject key identifier: DF:52:30:8E:97:29:D0:FF:88:F9:5E:55:26:DA:3F:B8:0E:C2:88:11 Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66 Certificate serial: 019AF1D22EC1AC1C0DEC121AD9B1B30D14D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft Manifest number: 0301 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: Bo532aI+Txj+lJTzarzGKTy/SIXLWz/6pkzk5hTb0CA=) 2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2e:c1:ac:1c:0d:ec:12:1a:d9:b1:b3:0d:14:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=df52308e9729d0ff88f95e5526da3fb80ec28811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cb:96:b9:42:cb:a7:73:d4:ba:1b:e8:1a:18: d0:7d:ee:78:50:ba:14:7c:10:1b:1c:03:6c:5b:91: 5c:9b:fb:d0:63:de:b5:8d:b6:4c:96:b0:9d:f5:25: cc:b2:17:ee:51:ed:d1:6d:95:7c:b5:5d:9c:e8:78: 1a:59:b0:8e:66:43:9c:a2:59:b9:40:44:dd:79:f5: 0e:90:ee:54:02:c1:ef:5a:ed:36:1a:0d:2c:0c:7d: 1e:2d:e3:b9:ea:29:b5:75:5f:4d:cd:7d:88:ee:a8: 35:57:34:78:a6:7f:f9:34:d5:ce:44:89:ce:13:ff: f1:f7:ae:9c:93:65:47:45:b4:b7:5c:5a:7a:f9:7e: b6:01:07:41:ae:90:52:47:33:14:ab:91:1b:64:92: 03:e6:12:95:54:d2:8b:81:88:4a:c1:8b:2c:71:32: 93:38:1e:0c:51:8f:f3:45:d2:43:70:dc:72:d4:2c: 54:79:2f:20:2f:1d:f6:1a:7d:8f:e7:2b:ea:d7:0d: c0:24:36:3c:13:af:7b:3b:15:e8:77:3e:49:c9:98: 45:48:3e:cd:90:d9:10:c7:4c:e0:14:32:8a:47:d9: 00:93:eb:18:fe:d3:0b:ac:10:37:19:65:d0:74:7a: b6:e7:12:e9:1a:00:65:5c:aa:5f:45:38:9d:59:16: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:52:30:8E:97:29:D0:FF:88:F9:5E:55:26:DA:3F:B8:0E:C2:88:11 X509v3 Authority Key Identifier: keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7b:e2:bc:0c:59:a7:b4:d2:96:66:aa:27:e8:0f:28:f9:4b: 97:7d:1d:3c:2b:92:9c:f2:34:68:b6:ed:3d:91:16:90:60:9f: 3c:0f:a8:98:0c:3b:1d:b0:00:d5:fb:03:13:a1:c0:1d:07:b7: fe:fe:7c:2f:44:3b:66:57:b3:b9:7b:79:d9:ed:3a:cd:f6:9c: 84:d4:45:54:46:0a:02:15:22:38:1e:21:e3:5e:27:e6:6d:ef: 5b:77:e2:e2:7b:c3:db:58:9f:c9:d7:16:f4:61:bd:c5:9f:c2: be:28:b7:3c:f4:93:28:56:39:00:73:17:ae:61:06:bb:2d:6a: 75:f5:23:ba:d2:5d:f3:59:ef:80:a3:48:a1:20:be:1e:7e:61: 37:46:63:17:a6:7c:ca:1f:99:39:ef:a1:03:fa:71:c5:0c:12: f0:47:dd:e4:77:7b:39:1b:39:6c:42:f0:ef:39:d0:59:df:96: 51:f5:bd:43:d4:cb:08:aa:ae:55:a9:e6:eb:51:77:24:e5:9d: 9d:42:5f:cd:b0:2c:1a:aa:ff:66:22:0e:7f:d4:75:5b:ae:6e: f8:79:27:23:d0:fc:3f:4a:ee:22:3a:b3:c9:05:74:df:ad:94: 3b:2f:ac:bc:c4:b6:41:f1:51:0d:aa:91:eb:9a:bc:2f:80:54: 7e:72:ad:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i7BrBwN7BIa2bGzDRTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTgxZGU4Yjc3MjAzOTQ1OTQ0NDhiN2EwZTYyNWMzM2Ez OGRjNjYwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EyhkZjUyMzA4ZTk3MjlkMGZmODhmOTVlNTUyNmRhM2ZiODBlYzI4ODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cuWuULLp3PUuhvoGhjQfe54ULoU fBAbHANsW5Fcm/vQY961jbZMlrCd9SXMshfuUe3RbZV8tV2c6HgaWbCOZkOcolm5 QETdefUOkO5UAsHvWu02Gg0sDH0eLeO56im1dV9NzX2I7qg1VzR4pn/5NNXORInO E//x966ck2VHRbS3XFp6+X62AQdBrpBSRzMUq5EbZJID5hKVVNKLgYhKwYsscTKT OB4MUY/zRdJDcNxy1CxUeS8gLx32Gn2P5yvq1w3AJDY8E697OxXodz5JyZhFSD7N kNkQx0zgFDKKR9kAk+sY/tMLrBA3GWXQdHq25xLpGgBlXKpfRTidWRY5nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9SMI6XKdD/iPleVSbaP7gOwogRMB8GA1UdIwQY MBaAFBmYHei3cgOUWURIt6DmJcM6ONxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQt YWMyYWU0ODM5NTVlLzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQtYWMyYWU0ODM5NTVl LzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnvivAxZ p7TSlmaqJ+gPKPlLl30dPCuSnPI0aLbtPZEWkGCfPA+omAw7HbAA1fsDE6HAHQe3 /v58L0Q7ZlezuXt52e06zfachNRFVEYKAhUiOB4h414n5m3vW3fi4nvD21ifydcW 9GG9xZ/Cvii3PPSTKFY5AHMXrmEGuy1qdfUjutJd81nvgKNIoSC+Hn5hN0ZjF6Z8 yh+ZOe+hA/pxxQwS8Efd5Hd7ORs5bELw7znQWd+WUfW9Q9TLCKquVanm61F3JOWd nUJfzbAsGqr/ZiIOf9R1W65u+HknI9D8P0ruIjqzyQV0362UOy+svMS2QfFRDaqR 65q8L4BUfnKtwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:25:14 2025 by rpki-client